please post your full config.

I would also check your firewall config (iptables/nftables) on the system to see if it's blocking the connection.

Also make sure you have a route to the destination IP (you probably have a default route that does this, but it is something we've run across)

are you seeing any startup errors? or config errors (start rsyslog manually with rsyslogd -N1

if none of that helps, we may need to get debug info, but start with the simpler stuff. Normally this 'just works' so I'd guess that it's a syntax error somewhere in the config.

David Lang

On Wed, 16 Aug 2023, kathy lyons via rsyslog wrote:

I hope this is the right place to ask this question.  I have a basic
rsyslog setup sending udp data from a Debian 11 host to a remote server.
At the bottom of my rsyslog.conf file I have:

 *.* @x.x.x.x

Logs are being sent to /var/log/daemon.log, /var/log/syslog, etc. so I am
not worried about that. The problem is that on the device itself I do not
see any logs leaving the device. Nor do I see them at the firewall
(x.x.x.x).  I  have used netcat to see if the remote port is open and
reachable and it is.  I have re-install rsyslog and restarted it.  Nothing
seems to work.

However, when I issue the logger command:

logger -n x.x.x.x -P 514 -d "This is a test"

I see that data.  What else can I check with my rsyslog setup?  Thank you.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to